Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218581 6.8 警告 SpringSource - Spring Framework の Spring MVC における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-7315 2014-01-27 15:39 2013-08-22 Show GitHub Exploit DB Packet Storm
218582 10 危険 アドビシステムズ - Adobe Digital Editions における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0494 2014-01-27 15:11 2014-01-22 Show GitHub Exploit DB Packet Storm
218583 6.8 警告 シスコシステムズ - Cisco Video Surveillance Operations Manager における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2014-0674 2014-01-27 14:48 2014-01-24 Show GitHub Exploit DB Packet Storm
218584 7.5 危険 レッドハット - Red Hat Certificate System および Dogtag Certificate System の Token Processing System におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2013-1886 2014-01-27 14:48 2013-05-22 Show GitHub Exploit DB Packet Storm
218585 4.3 警告 レッドハット - Red Hat Certificate System および Dogtag Certificate System の Token Processing System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1885 2014-01-27 14:47 2013-05-22 Show GitHub Exploit DB Packet Storm
218586 6.8 警告 日本電気 - 複数の NEC 製のルータの OSPF の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-7314 2014-01-27 14:39 2013-08-1 Show GitHub Exploit DB Packet Storm
218587 5.4 警告 Enterasys Networks - Enterasys のスイッチおよびルータの OSPF の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-7312 2014-01-27 14:33 2013-08-1 Show GitHub Exploit DB Packet Storm
218588 5.4 警告 ヤマハ - Yamaha ルータの OSPF の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-7310 2014-01-27 14:21 2013-08-1 Show GitHub Exploit DB Packet Storm
218589 5.4 警告 D-Link Systems, Inc. - D-Link DES-3810-28 スイッチのファームウェアの OSPF の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-7308 2014-01-27 14:13 2013-08-1 Show GitHub Exploit DB Packet Storm
218590 5.4 警告 ブロケード コミュニケーションズ システムズ株式会社 - Brocade Vyatta vRouter のソフトウェアの OSPF の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-7307 2014-01-27 14:09 2013-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293041 - fourkitchens block_class Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2012-1657 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
293042 - wesjones multisite_search SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix fi… CWE-89
SQL Injection
CVE-2012-1656 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
293043 - sven_decabooter uc_paydutchgroup_\/_wedeal_payment Unspecified vulnerability in the UC PayDutchGroup / WeDeal payment module 6.x-1.0 for Drupal allows remote authenticated users to obtain account credentials via unknown attack vectors. NVD-CWE-noinfo
CVE-2012-1655 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
293044 - alex_barth data Multiple cross-site scripting (XSS) vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data ta… CWE-79
Cross-site Scripting
CVE-2012-1654 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
293045 - microsoft visual_studio_team_foundation_server Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "X… CWE-79
Cross-site Scripting
CVE-2012-1892 2024-11-21 10:37 2012-09-12 Show GitHub Exploit DB Packet Storm
293046 - danielb cool_aid Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecifie… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1649 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
293047 - danielb cool_aid Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HT… CWE-79
Cross-site Scripting
CVE-2012-1648 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
293048 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted… CWE-79
Cross-site Scripting
CVE-2012-1582 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
293049 - mediawiki mediawiki MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1581 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
293050 - mediawiki mediawiki Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victim… CWE-352
 Origin Validation Error
CVE-2012-1580 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm